Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
File:                     uoGySm1gML8IjeowyaWTL-vcanw.mft (raw, json)
Hash identifier:          gOfruXQzrivGXkM+Tqg0zZBv9JabMcaMapBXFtboPxI=
Subject key identifier:   C3:4A:06:E2:B0:86:55:08:AD:54:A5:12:44:88:36:4E:22:75:14:03
Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
Certificate issuer:       /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Certificate serial:       0197B6D763AFEE383FA18E5764E94D7C2FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
Manifest number:          7C
Signing time:             Sat 28 Jun 2025 14:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:58 +0000
Files and hashes:         1: dHqraQM0J28TwBZI9kOV-wg_Nys.roa (hash: 9SP50kXHayfJ5rdM97ecdGjoNLOBx7zfNbIDZBfMyaE=)
                          2: uoGySm1gML8IjeowyaWTL-vcanw.crl (hash: sGSMlodcdLi69B9rdCL3cWDlL4rPrHjYh0vEPJafnSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:63:af:ee:38:3f:a1:8e:57:64:e9:4d:7c:2f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
        Validity
            Not Before: Jun 28 14:00:58 2025 GMT
            Not After : Jun 29 14:00:58 2025 GMT
        Subject: CN=c34a06e2b0865508ad54a5124488364e22751403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:14:8d:38:0d:56:3f:6c:0e:ad:fd:b9:c7:
                    e8:bc:36:85:8d:98:49:b7:63:f5:d2:86:ec:7d:86:
                    4b:84:2e:28:86:b7:c9:1c:f0:32:d2:3f:f1:61:c7:
                    e7:ff:45:01:83:6a:7f:51:e7:f5:84:25:d7:48:f5:
                    66:0c:cd:93:56:4c:dc:80:12:21:87:1a:58:64:c3:
                    b1:92:96:d6:7f:c7:eb:bb:4b:0a:45:46:f8:8f:87:
                    00:d7:95:a8:a5:37:c2:34:46:ca:e3:31:30:1c:e4:
                    1e:47:19:1f:37:ee:35:1e:3e:bf:da:42:57:4d:03:
                    25:ba:6f:5d:a7:94:bd:96:fc:86:03:81:cd:2c:ef:
                    28:c0:60:e8:5f:2c:f9:18:22:ff:62:6a:04:aa:bf:
                    7a:f4:72:96:68:a0:ee:43:c3:f9:cd:ff:d0:d8:57:
                    2f:57:0a:a6:5e:5c:ce:e0:e9:f4:18:ef:6d:8e:dd:
                    55:e4:5c:0d:77:ae:11:c7:6f:86:30:61:14:62:56:
                    bb:4a:d7:96:45:bf:9c:f5:52:f4:14:18:7b:9d:55:
                    70:b9:c7:e4:2b:d4:d7:ed:df:4a:f3:88:9b:9e:cf:
                    ee:c0:24:de:52:71:4a:bd:48:18:16:a4:c9:c7:13:
                    bf:f1:b4:27:5b:d0:bb:f7:98:d4:6d:d0:d0:6c:3e:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4A:06:E2:B0:86:55:08:AD:54:A5:12:44:88:36:4E:22:75:14:03
            X509v3 Authority Key Identifier:
                keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:87:26:f2:a2:89:4b:88:be:fa:cf:1f:22:ef:f0:fc:43:4f:
         48:ca:80:12:83:05:ef:5a:57:76:43:af:db:c1:8b:00:62:3a:
         36:15:c5:1d:48:ff:81:a6:56:32:28:20:1a:f5:03:03:ca:b8:
         e7:19:46:a4:e4:71:f7:3f:03:44:49:98:05:57:ab:24:21:e7:
         04:82:2b:00:e1:e8:76:bd:3a:7a:cb:2d:f3:1d:aa:61:b8:8d:
         4a:fb:8f:19:39:17:e4:eb:6e:88:bc:99:ac:51:6f:34:11:1b:
         0c:37:c6:82:44:e8:55:58:6a:d0:7b:3b:cf:dd:5d:f6:61:cc:
         78:66:df:ae:07:48:a1:7a:5e:23:72:cb:77:b5:13:4e:73:09:
         af:ee:99:39:34:4f:ec:7e:05:c7:64:dc:77:09:d0:eb:ac:43:
         a3:5b:c1:dc:9d:09:17:77:ff:c5:55:d5:e4:93:6f:9c:a5:9c:
         39:48:45:31:f6:60:b2:70:11:e5:e3:4b:d9:e6:96:b5:f4:a9:
         5b:d7:fc:80:19:fd:b3:64:48:0a:48:d9:fc:f5:9a:c1:2a:38:
         78:75:6a:90:29:98:e6:f8:04:8c:98:51:ad:bb:84:12:ea:3a:
         72:37:c2:e1:16:0c:32:f9:76:62:57:42:4e:45:e5:26:de:b4:
         4a:42:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:28 2025 by rpki-client